推荐一个实用的开源工具——routersploit。项目由threat9开发维护，GitHub上获得了 13240 个Star。简单来说，它是一款嵌入式设备的利用框架，对于站长和开发者来说是个不错的工具。
工具功能介绍
Community
Join community on Embedded Exploitation Discord.
Description
The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices.
It consists of various modules that aid penetration testing operations:* exploits - modules that take advantage of identified vulnerabilities
- creds - modules designed to test credentials against network services
- scanners - modules that check if a target is vulnerable to any exploit
- payloads - modules that are responsible for generating payloads for various architectures and injection points
- generic - modules that perform generic attacks
Installation
Requirements
Required:
- requests
- paramiko
- pysnmp
- pycryptoOptional:
- bluepy - Bluetooth low energy
Installation on Kali Linux
apt-get install python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py
Bluetooth Low Energy support:
apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py
Installation on Ubuntu 20.04
sudo apt-get install git python3-pip
git clone https://github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py
Bluetooth Low Energy support:
sudo apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py
Installation on Ubuntu 18.04 & 17.10
sudo add-apt-repository universe
sudo apt-get install git python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install setuptools
python3 -m pip install -r requirements.txt
python3 rsf.py
Bluetooth Low Energy support:
apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py
Installation on OSX
git clone https://www.github.com/threat9/routersploit
cd routersploit
sudo python3 -m pip install -r requirements.txt
python3 rsf.py
Running on Docker
git clone https://www.github.com/threat9/routersploit
cd routersploit
docker compose up --build -d
docker attach routersploit
To run again without rebuild
docker start routersploit
docker attach routersploit
Update
Update RouterSploit Framework often. The project is under heavy development and new modules are shipped almost every day.
cd routersploit
git pull
Build your own
To our surprise, people started to fork
routersploit not because they were
interested in the security of embedded devices but simply because they want to
leverage our interactive shell logic and build their tools using similar
concept. All these years they must have said: "There must be a better way!"
and they were completely right, the better way is called
Riposte.Riposte allows you to easily wrap your
application inside a tailored interactive shell. Common chores regarding
building REPLs was factored out and being taken care of so you can
focus on specific domain logic of your application.
License
The RouterSploit Framework is under a BSD license.
Please see LICENSE for more details.
Acknowledgments
总的来说，routersploit是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。